Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.
1. A computer-implemented method performed by a data processing apparatus, the method comprising: receiving, at an emulation system from a system in a virtual private cloud, an Application Programming Interface (API) request comprising an indication of an endpoint associated with a target region of a cloud computing service; extracting one or more attributes from the API request; generating a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises an indication of an endpoint located in a standard region of the cloud computing service; transmitting the manipulated API request to the endpoint located in the standard region of the cloud computing service; and receiving, at the emulation system, an API request response comprising an indication of an endpoint located in the standard region of the cloud computing service; extracting one or more attributes from the API request response; generating a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in the target region of a cloud computing service; and transmitting the manipulated API request response to the system in the virtual private cloud.
Cloud computing infrastructure management. This invention addresses the challenge of interacting with cloud services when a user's resources are located in a specific, potentially non-standard, region, while the cloud service's primary endpoints are in a standard region. The method involves an emulation system that intercepts an Application Programming Interface (API) request originating from a system within a virtual private cloud. This initial request includes information about a target region within a cloud computing service. The emulation system then extracts attributes from this request and constructs a modified API request. This manipulated request is designed to target an endpoint located in a standard region of the cloud computing service. After transmitting the manipulated request to the standard region endpoint, the emulation system receives a response. This response also contains information about an endpoint, specifically one located in the standard region. The system then extracts attributes from this API request response and generates a manipulated API request response. This manipulated response is altered to indicate an endpoint located in the original target region of the cloud computing service. Finally, this manipulated response is transmitted back to the originating system in the virtual private cloud. This process effectively translates requests and responses between different regional endpoints within a cloud computing service.
2. The computer-implemented method of claim 1 , wherein generating a manipulated API request from the extracted one or more attributes of the API request comprises replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.
3. The computer-implemented method of claim 1 , wherein generating a manipulated API request response from the extracted one or more attribute of the API request response comprises replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
This technical summary describes a method for modifying API request responses in a cloud computing environment to redirect traffic between different regions. The method addresses the challenge of managing API requests across multiple geographic regions in cloud computing services, where endpoints may vary by region, leading to inefficiencies or errors when requests are not properly routed. The method involves extracting one or more attributes from an API request response, particularly focusing on the endpoint indication located in the standard region of the cloud computing service. The extracted endpoint is then replaced with an endpoint associated with a target region, effectively manipulating the API response to redirect traffic to the desired region. This ensures that subsequent requests or operations are processed in the correct geographic location, improving reliability and performance. The method may also include additional steps such as intercepting the API request response, analyzing its structure to identify the standard region endpoint, and dynamically substituting it with the target region endpoint. This dynamic replacement allows for seamless integration with existing cloud services without requiring extensive modifications to the underlying infrastructure. The approach is particularly useful in scenarios where workloads need to be shifted between regions for load balancing, compliance, or disaster recovery purposes.
4. The computer-implemented method of claim 1 , further comprising: receiving, at the emulation system, from the system in the virtual private cloud, a Domain Name System (DNS) query comprising a name associated with an endpoint associated with the target region, wherein the system in the virtual private cloud is configured to send DNS queries to a DNS service of the emulation system; resolving the DNS query to an IP address of the emulation system; and transmitting the IP address to the system in the virtual private cloud.
5. The computer-implemented method of claim 1 , further comprising: performing one or more tests on the API request received from the system in the virtual private cloud, wherein results of the tests are based on whether the API request is properly formed to be used with the target region of the cloud computing service; and storing the results of the one or more tests in a database.
6. The computer-implemented method of claim 1 , further comprising: receiving, at the emulation system, a Public Key Infrastructure (PKI) certificate and a query string indicating a cloud computing service account and a cloud computing service role; authenticating, by federation service of the emulation system, a sender of the PKI certificate based on one or more attributes of the PKI certificate; requesting, by the federation service, temporary credentials for the cloud computing service using the PKI certificate, wherein the temporary credentials comprise credentials for access to the cloud computing service account with the cloud computing service role; receiving, by the emulation system, the temporary credentials; and sending the temporary credentials to the sender of the PKI certificate.
7. The computer-implemented method of claim 1 , further comprising testing one or more logs generated by a region of the cloud computing service.
A method for monitoring and analyzing cloud computing services involves detecting anomalies in system behavior by evaluating logs generated by different regions of the cloud service. The method includes collecting log data from multiple regions, where each region represents a distinct operational segment of the cloud service. The logs are processed to identify patterns, deviations, or irregularities that may indicate potential issues such as performance degradation, security breaches, or service disruptions. The analysis may involve statistical techniques, machine learning models, or rule-based checks to assess log entries for anomalies. Once anomalies are detected, alerts or notifications are generated to inform administrators or automated systems, enabling timely intervention. The method may also include correlating logs from different regions to determine the scope and impact of detected issues. Additionally, the system may log the results of the anomaly detection process for further review or auditing. This approach enhances cloud service reliability by proactively identifying and addressing problems before they escalate.
8. A computer-implemented system comprising: one or more storage devices; one or more processors that receive from a system in a virtual private cloud, an Application Programming Interface (API) request comprising an indication of an endpoint associated with a target region of a cloud computing service, extract one or more attributes from the API request, store the API request in the one or more storage devices, generate a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises an indication of an endpoint located in a standard region of the cloud computing service, transmit the manipulated API request to the endpoint located in the standard region of the cloud computing service, receive an API request response comprising an indication of an endpoint located in the standard region of the cloud computing service, extract one or more attributes from the API request response, generate a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in the target region of a cloud computing service, and transmit the manipulated API request response to the system in the virtual private cloud.
9. The computer-implemented system of claim 8 , wherein the one or more processors generate a manipulated API request from the extracted one or more attributes of the API request by replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.
10. The computer-implemented system of claim 9 , wherein the one or more processors generate a manipulated API request response from the extracted one or more attribute of the API request response by replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
11. The computer-implemented system of claim 8 , wherein the one or more processors further receive, from the system in the virtual private cloud, a Domain Name System (DNS) query comprising a name associated with an endpoint associated with the target region, wherein the system in the virtual private cloud is configured to send DNS queries to a DNS service of the emulation system, resolve the DNS query to an IP address of an emulation system comprising the one or more processors, and transmit the IP address to the system in the virtual private cloud.
12. The computer-implemented system of claim 8 , wherein the one or more processors further perform one or more tests on the API request received from the system in the virtual private cloud, wherein results of the tests are based on whether the API request is properly formed to be used with the target region of the cloud computing service and store the results of the one or more tests in a database in the one or more storage devices.
13. The computer-implemented system of claim 8 , wherein the one or more processors further receive a Public Key Infrastructure (PKI) certificate and a query string indicating a cloud computing service account and a cloud computing service role, authenticate a sender of the PKI certificate based on one or more attributes of the PKI certificate, request temporary credentials for the cloud computing service using the PKI certificate, wherein the temporary credentials comprise credentials for access to the cloud computing service account with the cloud computing service role, receive the temporary credentials, and send the temporary credentials to the sender of the PKI certificate.
14. The computer-implemented system of claim 8 , wherein the one or more processors further test one or more logs generated by a region of the cloud computing service.
15. A system comprising: one or more computers and one or more storage devices storing instructions which are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising: receiving, at an emulation system from a system in a virtual private cloud, an Application Programming Interface (API) request comprising an indication of an endpoint associated with a target region of a cloud computing service; extracting one or more attributes from the API request; generating a manipulated API request from the extracted one or more attributes of the API request, wherein the manipulated API request comprises an indication of an endpoint located in a standard region of the cloud computing service; transmitting the manipulated API request to the endpoint located in the standard region of the cloud computing service; receiving, at the emulation system, an API request response comprising an indication of an endpoint located in the standard region of the cloud computing service; extracting one or more attributes from the API request response; generating a manipulated API request response from the extracted one or more attributes of the API request response, wherein the manipulated API request response comprises an indication of an endpoint located in the target region of a cloud computing service; and transmitting the manipulated API request response to the system in the virtual private cloud.
The system operates in the domain of cloud computing, specifically addressing the challenge of emulating API interactions between a virtual private cloud (VPC) and a cloud computing service across different regions. The system enables seamless communication by translating API requests and responses between endpoints in a target region and a standard region of the cloud computing service. When an API request is received from a system in a VPC, the system extracts attributes such as the target region endpoint and generates a manipulated API request that redirects the request to an endpoint in a standard region. The system then processes the API response from the standard region by extracting its attributes and generating a manipulated response that replaces the standard region endpoint with the target region endpoint before transmitting it back to the VPC. This approach ensures compatibility and functionality without requiring direct access to the target region, facilitating testing, development, or migration scenarios where regional isolation is necessary. The system relies on one or more computers and storage devices to execute these operations, dynamically modifying API requests and responses to maintain consistency across regions.
16. The system of claim 15 , wherein the instructions which are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising generating a manipulated API request from the extracted one or more attributes of the API request further cause the one or more computers to perform operations comprising replacing the indication of the endpoint associated with the target region of the API request with the indication of the endpoint located in the standard region of the cloud computing service.
17. The system of claim 15 , wherein the instructions which are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising generating a manipulated API request response from the extracted one or more attribute of the API request response further cause the one or more computers to perform operations comprising replacing the indication of the endpoint located in the standard region of the cloud computing service of the API request response with the indication of the endpoint associated with the target region.
Unknown
March 23, 2021
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.